Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3651bc7-250a-3289-a011-b64fcdfa8142.roa
File: e3651bc7-250a-3289-a011-b64fcdfa8142.roa (raw, json)
Hash identifier: e2k9kxkFQQ0CbTys/TF3y2tZNp1LwTc/lZweHPClDdQ=
Subject key identifier: 17:7C:19:68:19:55:31:53:6A:23:BC:85:36:E0:2B:CD:78:B9:08:EE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EFEE57A6F5AA1FBC72F000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3651bc7-250a-3289-a011-b64fcdfa8142.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.135.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ef:ee:57:a6:f5:aa:1f:bc:72:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2b8af3f3-347c-44b9-8f57-f52ba1f325e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:f1:dc:da:e2:ab:e0:3a:03:a9:bb:93:02:
e9:1a:72:c3:4a:9c:ad:2b:a5:62:56:9f:5b:3e:5d:
b3:9c:70:1f:a3:37:1e:57:75:da:18:6e:6b:ea:6a:
72:aa:c0:0d:cf:3d:c4:78:4c:bb:ed:ae:d1:fc:9b:
aa:7c:a2:4b:dc:49:51:ab:ca:da:fd:6a:2b:6c:5e:
2f:c8:be:59:40:36:eb:70:7f:d0:89:69:2a:8c:c9:
8d:a8:96:f2:97:44:8a:da:dc:5c:ff:2a:c1:4b:d6:
d2:d2:b2:18:13:ed:bb:d2:8d:73:02:52:65:f7:c0:
92:43:28:ee:36:ec:c8:2a:8f:57:29:0d:66:7c:f7:
03:0a:5e:82:ac:86:4f:cd:24:9a:a7:45:9a:7d:32:
ef:5c:e4:4d:aa:29:1d:be:22:93:45:6a:e5:39:0e:
65:41:77:7a:55:b8:ad:58:8c:d6:4e:e6:3a:00:05:
35:98:98:5e:9b:3f:1b:75:76:21:7d:49:e7:be:86:
ae:91:da:f3:71:23:6f:8a:f1:7a:4e:57:48:1b:1e:
c3:c3:8d:aa:39:63:ea:c1:da:ab:d6:ca:5e:55:51:
e5:ec:d8:98:6e:12:e1:c4:49:b8:e7:0e:1a:a2:2a:
d6:52:6f:e6:6c:d6:5c:2a:ef:15:46:a5:4c:58:af:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7C:19:68:19:55:31:53:6A:23:BC:85:36:E0:2B:CD:78:B9:08:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3651bc7-250a-3289-a011-b64fcdfa8142.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.135.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:fd:c4:35:66:2d:53:bc:4c:83:31:80:04:9b:35:6e:14:44:
38:02:61:77:dd:3c:b5:cb:12:0c:26:d9:e3:74:14:92:02:17:
4d:58:c9:cd:49:a0:1c:42:f8:6d:85:7a:74:6c:0f:64:83:06:
2e:83:1f:9f:2e:41:b8:f0:d5:12:78:98:13:7d:a6:ae:9f:0e:
c7:2d:04:46:ce:fb:33:e8:c8:2b:8c:30:a5:8c:2f:46:3d:8a:
e2:bd:91:7f:bd:81:26:dd:6b:2e:0c:3d:4b:4a:b2:3c:ce:32:
0e:1d:a7:54:0b:42:25:92:b2:58:31:cf:d3:e1:c5:06:41:10:
a7:80:4d:45:1d:26:87:24:cf:03:5b:32:3f:3a:89:a3:79:0c:
3b:7e:d9:1f:89:a6:0b:7a:44:2d:77:68:6f:33:14:ee:55:b6:
24:58:ca:c7:6d:dd:21:ef:93:df:f5:cc:d6:c6:df:d4:01:06:
8e:9e:d0:e7:3d:82:0b:ab:6d:3b:6a:cc:48:9d:2f:c0:e5:26:
64:39:a4:2b:85:ff:62:e0:09:e9:62:54:fa:9c:37:c5:17:af:
b8:1c:76:4f:4a:3b:95:da:78:d2:ac:99:2c:2f:4b:c3:fe:dc:
21:b7:22:06:c0:0f:6c:6c:bd:46:5f:80:15:9f:fd:95:74:57:
9f:3f:f7:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ7+5XpvWqH7xy8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MmI4YWYzZjMtMzQ3Yy00NGI5LThmNTctZjUyYmExZjMyNWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVbx3Nriq+A6A6m7kwLpGnLDSpytK6ViVp9b
Pl2znHAfozceV3XaGG5r6mpyqsANzz3EeEy77a7R/JuqfKJL3ElRq8ra/WorbF4v
yL5ZQDbrcH/QiWkqjMmNqJbyl0SK2txc/yrBS9bS0rIYE+270o1zAlJl98CSQyju
NuzIKo9XKQ1mfPcDCl6CrIZPzSSap0WafTLvXORNqikdviKTRWrlOQ5lQXd6Vbit
WIzWTuY6AAU1mJhemz8bdXYhfUnnvoaukdrzcSNvivF6TldIGx7Dw42qOWPqwdqr
1speVVHl7NiYbhLhxEm45w4aoirWUm/mbNZcKu8VRqVMWK+miQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBd8GWgZVTFTaiO8hTbgK814uQjuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTM2NTFiYzctMjUwYS0z
Mjg5LWEwMTEtYjY0ZmNkZmE4MTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoewMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGv9xDVmLVO8TIMxgASbNW4URDgCYXfdPLXLEgwm2eN0FJICF01Yyc1J
oBxC+G2FenRsD2SDBi6DH58uQbjw1RJ4mBN9pq6fDsctBEbO+zPoyCuMMKWML0Y9
iuK9kX+9gSbday4MPUtKsjzOMg4dp1QLQiWSslgxz9PhxQZBEKeATUUdJockzwNb
Mj86iaN5DDt+2R+Jpgt6RC13aG8zFO5VtiRYysdt3SHvk9/1zNbG39QBBo6e0Oc9
ggurbTtqzEidL8DlJmQ5pCuF/2LgCeliVPqcN8UXr7gcdk9KO5XaeNKsmSwvS8P+
3CG3IgbAD2xsvUZfgBWf/ZV0V58/9xo=
-----END CERTIFICATE-----
Generated at Sun May 11 04:03:48 2025 by rpki-client